The vulnerability of the virtual learning environment Moodle, related to deficiencies in authentication procedures, allows unauthorized users to gain access to system elements.

The vulnerability of the virtual learning environment Moodle is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to system components...

The vulnerability of the Git-based software platform for collaborative code development on GitLab EE/CE is related to deficiencies in the authentication mechanism. This allows unauthorized users to gain unauthorized access to protected information.

The vulnerability of the Git-based software platform for collaborative code development in GitLab EE/CE is related to deficiencies in the authentication mechanism. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerabilities of the Fortinet FortiManager software for centralized device management, the FortiPAM system for account management, the FortiProxy proxy server for protecting against internet attacks, the FortiSwitchManager local management platform, the Fortinet FortiPortal security analytics and management tool, and the FortiOS operating system, allow attackers to send network packets to internal resources.

The vulnerabilities of the Fortinet FortiManager software for centralized device management, the FortiPAM system for account management, the FortiProxy proxy server for protecting against internet attacks, the FortiSwitchManager local management platform, the Fortinet FortiPortal security analyti...

Vulnerabilities of the plugins Really Simple Security Free, Really Simple Security Pro, and Really Simple Security Pro Multisite of the WordPress content management system, which allow attackers to increase their privileges.

The vulnerabilities of the Really Simple Security Free, Really Simple Security Pro, and Really Simple Security Pro Multisite plugins of the WordPress content management system are related to authentication process flaws. Exploiting these vulnerabilities can allow attackers to increase their...

The vulnerability of the ConsumerPullTransferTokenValidationApiController component in the data-processing and information ecosystem software for Eclipse EDC allows a perpetrator to bypass token expiration checks.

The vulnerability of the ConsumerPullTransferTokenValidationApiController component in the data-processing and information ecosystem of Eclipse EDC is related to authentication procedures’ flaws. Exploiting this vulnerability could allow a malicious actor to bypass token expiration checks...

The vulnerability of TOTOLINK LR350 router’s microprogramming software, related to deficiencies in authentication procedures, allows attackers to circumvent security restrictions.

The vulnerability of TOTOLINK LR350 router microprogramming software is related to deficiencies in the authentication process when processing the authCode parameter. Exploiting this vulnerability allows an attacker to bypass security restrictions remotely...

The vulnerability of Omron Sysmac Studio, a software development environment for automating and managing manufacturing processes, stems from deficiencies in its authentication procedures. This allows attackers to circumvent security restrictions and gain unauthorized access to protected information.

The vulnerability of Omron Sysmac Studio, a software for automating and managing manufacturing processes, is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow attackers to circumvent security restrictions and gain unauthorized access to protected...

The vulnerability of the Audio, Web, and Video Conferencing component of the MiCollab collaboration platform allows a perpetrator to gain unauthorized access to read, modify, or delete data.

The vulnerability of the Audio, Web, and Video Conferencing component of the MiCollab collaboration platform is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to read, modify, or delete data...

The vulnerability of the InnoDB component in the Oracle MySQL Server database management system allows a hacker to gain unauthorized access for reading, creating, modifying, and deleting data, or to cause service failures.

The vulnerability of the InnoDB component in the Oracle MySQL Server database management system is related to deficiencies in the authentication process. Exploiting this vulnerability can allow an attacker to gain unauthorized access for reading, creating, modifying, and deleting data, or to caus...

The vulnerability of the SplunkDeploymentServerConfig component of the Splunk Enterprise platform for operational analytics allows a perpetrator to disclose protected information.

The vulnerability of the Splunk Enterprise platform for operational analysis is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker to disclose sensitive information that is protected by the system...

Vulnerability of the Server: Thread Pooling component of the Oracle MySQL Server database management system, which allows attackers to cause service interruptions.

The vulnerability of the Server: Thread Pooling component of the Oracle MySQL Server database management system is related to deficiencies in the authentication process. Exploiting this vulnerability can allow an attacker to cause service interruptions using the MySQL protocol...

The vulnerability of software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B lies in their authentication procedures’ deficiencies, which allow attackers to circumvent security restrictions.

The vulnerabilities of the software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B are related to deficiencies in authentication procedures. Exploiting these vulnerabilities can allow attackers to bypass security restriction...

The vulnerability of software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B lies in their inadequate authentication procedures, which allow attackers to bypass security restrictions.

The vulnerabilities of the software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B are related to deficiencies in authentication procedures. Exploiting these vulnerabilities can allow attackers to bypass security restriction...

The vulnerability of software platforms for developing and managing online stores like Magento Open Source, Adobe Commerce, and Adobe Commerce B2B lies in their lack of authentication mechanisms, which allow attackers to circumvent security restrictions.

The vulnerabilities of the software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B are related to deficiencies in authentication mechanisms. Exploiting these vulnerabilities can allow attackers to bypass security restriction...

The vulnerability of the student lifecycle management system in higher education institutions, SAP Student Life Cycle Management (SLcM), is related to deficiencies in the authentication process, which allow unauthorized users to increase their privileges.

The vulnerability of the student lifecycle management system in higher education institutions, SAP Student Life Cycle Management SLcM, is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to enhance their privileges remotely...

The vulnerability of the SAP Shared Service Framework’s network service management software, related to deficiencies in the authentication process, allows a perpetrator to escalate their privileges.

The vulnerability of the SAP Shared Service Framework’s network service management software is related to deficiencies in the authentication process. Exploiting this vulnerability can allow attackers to enhance their privileges remotely...

The vulnerability in the implementation of the application programming interface for Zoho ManageEngine ServiceDesk Plus, Zoho ManageEngine ServiceDesk Plus MSP, and Zoho ManageEngine SupportCenter Plus allows a attacker to perform XSS attacks.

The vulnerability of the application programming interface for Zoho ManageEngine ServiceDesk Plus, Zoho ManageEngine ServiceDesk Plus MSP, and Zoho ManageEngine SupportCenter Plus is related to deficiencies in the authentication mechanism. Exploiting this vulnerability allows a malicious actor to...

Advisory ROSA-SA-2024-2496

Software: cups 2.2.6 OS: ROSA Virtualization 2.1 packageevrstring: cups-2.2.6-60.rv3 CVE-ID: CVE-2023-32324 BDU-ID: 2023-03873 CVE-Crit: HIGH CVE-DESC.: A vulnerability in the formatlogline function of the CUPS print server is related to writing beyond buffer boundaries. Exploitation of the...

PT-2024-7432 · Draytek · Draytek Vigor310

Name of the Vulnerable Software and Affected Versions: DrayTek Vigor310 devices through 4.3.2.6 Description: The issue is related to shortcomings in the authentication procedure of DrayTek Vigor router software. Exploitation of this issue may allow a remote attacker to impact the confidentiality,...

The vulnerability of the WatchGuard Authentication Gateway software is related to deficiencies in its authentication mechanism, which allows a hacker to obtain memory dumps.

The vulnerability of the WatchGuard Authentication Gateway authentication software is related to deficiencies in its authentication mechanism. Exploiting this vulnerability could allow a malicious actor, operating remotely, to obtain memory dumps from the software through a specially crafted...